nether/vommet

Watch

Fork 0

In-app updates (opt-in): signed feed, update bar, Windows/Android install #98

New issue

Open

opened 2026-10-07 23:33:35 +00:00 by robocub · 0 comments

robocub commented

2026-10-07 23:33:35 +00:00

Member

Phases

Signed feed + update bar — feat/auto-update (not yet listed). The checker reads our own feed (update-feed branch, testing.json), signed with an Ed25519 key held as CI secret UPDATE_FEED_KEY; the app checks the signature against a public key compiled in. A newer release for this platform shows a bar with Download / Later (Download opens the release page). Builds are compared by source commit time, so every platform's build of one release counts as the same version, and a release without a Windows build doesn't hide the last one. Commet's checker (Commet's release data + Commet's Windows installer) is gone. Checks stay off until the public key is filled in.
Windows: Velopack — per-user install (no admin prompt), background delta downloads, apply-and-restart behind the bar. Unsigned for now (no Microsoft identity verification), so the first install shows SmartScreen once; updates don't. Zip users reinstall once.
Android: self-install (sideload builds only) — background APK download + PackageInstaller; silent from Android 12 once the app installed itself, one confirm tap the first time. Needs REQUEST_INSTALL_PACKAGES, so it must stay out of F-Droid/Play builds (separate flavor).
Flatpak: "restart to apply" — Flathub forbids self-updaters; instead use the Flatpak portal's update monitor to show the same bar when a newer version was installed in the background. The single-file .flatpak tester bundle can't update itself; it gets the phase-1 Download bar.

Notes

One channel for now: testing. A stable channel later is a second feed file (stable.json) plus a build define picking the channel; nothing in the format changes.
A Flathub build must set its own BUILD_DETAIL (not flatpak), or it would check the testing feed.
Releases → feed: after publishing a tester release, dispatch publish-feed.yml on ref update-feed.

In-app updates for people who opt in (Settings › Check for updates), Discord-style: download in the background, then a bar at the bottom of the app — "Update installed, restart now?" — that can be clicked or dismissed. Most useful on Windows and Android, where there's no package manager doing it for us. ## Phases 1. **Signed feed + update bar** — `feat/auto-update` (not yet listed). The checker reads our own feed (`update-feed` branch, `testing.json`), signed with an Ed25519 key held as CI secret `UPDATE_FEED_KEY`; the app checks the signature against a public key compiled in. A newer release for this platform shows a bar with Download / Later (Download opens the release page). Builds are compared by source commit time, so every platform's build of one release counts as the same version, and a release without a Windows build doesn't hide the last one. Commet's checker (Commet's release data + Commet's Windows installer) is gone. Checks stay **off** until the public key is filled in. 2. **Windows: Velopack** — per-user install (no admin prompt), background delta downloads, apply-and-restart behind the bar. Unsigned for now (no Microsoft identity verification), so the *first* install shows SmartScreen once; updates don't. Zip users reinstall once. 3. **Android: self-install (sideload builds only)** — background APK download + `PackageInstaller`; silent from Android 12 once the app installed itself, one confirm tap the first time. Needs `REQUEST_INSTALL_PACKAGES`, so it must stay out of F-Droid/Play builds (separate flavor). 4. **Flatpak: "restart to apply"** — Flathub forbids self-updaters; instead use the Flatpak portal's update monitor to show the same bar when a newer version was installed in the background. The single-file `.flatpak` tester bundle can't update itself; it gets the phase-1 Download bar. ## Notes - One channel for now: **testing**. A stable channel later is a second feed file (`stable.json`) plus a build define picking the channel; nothing in the format changes. - A Flathub build must set its own `BUILD_DETAIL` (not `flatpak`), or it would check the testing feed. - Releases → feed: after publishing a tester release, dispatch `publish-feed.yml` on ref `update-feed`.

No Branch/Tag specified

main

fix/unifiedpush-distributor-picker

fix/space-avatar-viewer

feat/image-save-and-viewer

fix/sidebar-drag-desktop

feat/message-drafts

feat/forward-messages

fix/profile-menu-clear

fix/quick-card-status

feat/banner-panes

fix/quick-card-banner

sync/state

sync/testing

sync/topic/feat/multi-sfu

sync/topic/feat/room-calls

sync/topic/feat/room-calls-start

sync/topic/fix/room-list-duplicates

sync/topic/ci/xplat

sync/topic/feat/matrix-links

sync/topic/feat/msc3160-timestamps

sync/topic/feat/screenshare-audio-picker

sync/topic/feat/screenshare-audio-stereo

sync/topic/feat/whats-new

sync/topic/fix/android-screenshare-errors

sync/topic/fix/call-join-retry

sync/topic/fix/call-view-follow-replaced-stream

sync/topic/fix/room-view-dispose-races

sync/topic/fix/screenshare-audio-app-names

sync/topic/fix/screenshare-audio-wayland-order

sync/topic/fix/screenshare-desktop-no-apm

sync/topic/fix/screenshare-one-at-a-time

sync/topic/fix/startup-launch-test

sync/topic/perf/lazy-side-room-lists

sync/topic/feat/native-oidc

sync/topic/feat/quick-audio-output

sync/topic/feat/quick-profile-controls

sync/topic/feat/telemetry-call-leave

sync/topic/feat/telemetry-capture

sync/topic/feat/telemetry-errcode

sync/topic/feat/telemetry-exit-reason

sync/topic/feat/telemetry-native-trace

sync/topic/feat/telemetry-timeline

sync/topic/feat/voice-isolation

sync/topic/feat/voice-quick-controls

sync/topic/fix/android-onaddtrack-race

sync/topic/fix/telemetry-consent-look

sync/topic/feat/dm-toggle-and-menu-tooltips

sync/topic/feat/screenshare-audio-linux

sync/topic/feat/screenshare-audio-upstream

sync/topic/feat/telemetry

sync/topic/fix/accept-dm-invite

sync/topic/fix/profile-nickname-others

sync/topic/ci/integration-banners

sync/topic/ci/integration-mosaic

sync/topic/ci/integration-tests

sync/topic/feat/discover

sync/topic/feat/sliding-sync

sync/topic/feat/welcome-first-login

sync/topic/fix/banner-thumbnail-scale

sync/topic/fix/directory-empty-message

sync/topic/fix/image-fullres-cache

sync/topic/fix/missing-media

sync/topic/fix/notification-fallback

sync/topic/fix/room-preview-deleted

sync/topic/fix/startup-splash-until-loaded

sync/topic/fix/sticker-picker-resolution

sync/topic/fix/voip-late-joiner-tiles

sync/topic/perf/lazy-home-room-list

sync/topic/perf/postload-keep-ui-responsive

sync/topic/perf/startup-postload-queue

sync/topic/ci/flatpak

sync/topic/ci/fork-invariants

sync/topic/feat/banner-headers

sync/topic/feat/desktop-copy-selection

sync/topic/feat/gradient-themes

sync/topic/feat/media-mosaic

sync/topic/feat/personal-packs

sync/topic/feat/room-banners

sync/topic/feat/room-picker-search

sync/topic/feat/space-remove-room

sync/topic/feat/sso-first-login

sync/topic/feat/telegram-sticker-import

sync/topic/feat/voice-messages

sync/topic/fix/linux-app-id

sync/topic/fix/own-push-gateway

sync/topic/chore/branding

sync/topic/chore/fork-settings

sync/topic/ci/android-apk

sync/topic/ci/version-label

sync/topic/fix/commet-badges-display-only

feat/telemetry-crypto

sync/main

feat/whats-new

fix/directory-empty-message

feat/multi-sfu

feat/room-calls-start

testing

ci/xplat

feat/matrix-links

feat/msc3160-timestamps

feat/room-calls

feat/screenshare-audio-picker

feat/screenshare-audio-stereo

fix/android-screenshare-errors

fix/call-join-retry

fix/call-view-follow-replaced-stream

fix/room-list-duplicates

fix/room-view-dispose-races

fix/screenshare-audio-app-names

fix/screenshare-audio-wayland-order

fix/screenshare-desktop-no-apm

fix/screenshare-one-at-a-time

fix/startup-launch-test

feat/native-oidc

feat/quick-audio-output

feat/quick-profile-controls

feat/telemetry-call-leave

feat/telemetry-capture

feat/telemetry-errcode

feat/telemetry-exit-reason

feat/telemetry-native-trace

feat/telemetry-timeline

feat/voice-quick-controls

fix/telemetry-consent-look

perf/lazy-side-room-lists

feat/voice-isolation

fix/android-onaddtrack-race

ci/integration-banners

feat/dm-toggle-and-menu-tooltips

feat/screenshare-audio-linux

feat/screenshare-audio-upstream

feat/telemetry

feat/welcome-first-login

fix/accept-dm-invite

fix/profile-nickname-others

fix/startup-splash-until-loaded

perf/lazy-home-room-list

perf/postload-keep-ui-responsive

ci/integration-mosaic

ci/integration-tests

feat/discover

feat/sliding-sync

fix/banner-thumbnail-scale

fix/image-fullres-cache

fix/missing-media

fix/notification-fallback

fix/room-preview-deleted

fix/sticker-picker-resolution

fix/voip-late-joiner-tiles

perf/startup-postload-queue

ci/flatpak

ci/fork-invariants

feat/banner-headers

feat/desktop-copy-selection

feat/gradient-themes

feat/media-mosaic

feat/personal-packs

feat/room-banners

feat/room-picker-search

feat/space-remove-room

feat/sso-first-login

feat/telegram-sticker-import

feat/voice-messages

fix/linux-app-id

fix/own-push-gateway

ci/android-apk

chore/branding

chore/fork-settings

ci/version-label

fix/commet-badges-display-only

update-feed

feat/auto-update

docs/soundboard-spec

fix/splash-timeout-crash

ci/xplat-fix

ci/windows-release

ci/windows-preview

ci/windows

ci/sync-dep-report

fix/sticker-no-autofavorite

chore/register-gradient-themes

design/logo

bootstrap

keybinder

update-emoji

fix-url-previews

fix-flatpak

test-color-scheme-generation

widget-reliability

custom-themes

livekit-rust

test-disabled-notification-counts

stutter-test

improved-link-handling

platform/ios

rich-notifications-linux

fix/gif-search-input

test/voip-data-channel

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

nether/vommet#98

No description provided.

Rows
Columns